This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/plhSuqqJa0jwOYQK5HTONg70a4M.roa File: plhSuqqJa0jwOYQK5HTONg70a4M.roa (raw, json) Hash identifier: cKDU2K6sGfkO/N88v+vmRc1FSMIHeKN+UvIPHCWpjco= Subject key identifier: A6:58:52:BA:AA:89:6B:48:F0:39:84:0A:E4:74:CE:36:0E:F4:6B:83 Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580 Certificate serial: 019B7C11D40CB35B4361F05645AE29BFC1D2 Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/plhSuqqJa0jwOYQK5HTONg70a4M.roa Signing time: Fri 02 Jan 2026 00:18:21 +0000 ROA not before: Fri 02 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39923 IP address blocks: 171.25.229.0/24 maxlen: 24 185.70.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d4:0c:b3:5b:43:61:f0:56:45:ae:29:bf:c1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580 Validity Not Before: Jan 2 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a65852baaa896b48f039840ae474ce360ef46b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:b9:67:28:97:78:b7:a0:5f:50:25:d4:44: 50:0b:ca:01:7d:0e:f4:83:25:14:f6:c3:9b:c5:fb: 55:d5:67:be:f0:9b:d5:5d:86:1f:ce:5b:7a:87:d3: c8:99:03:ea:b5:c1:f4:a5:76:fd:34:56:8b:1e:9d: d0:37:60:12:7e:78:9a:90:a4:9d:1b:ca:c3:04:0f: 9d:6b:9a:ec:b5:14:24:09:e5:a7:d5:99:45:d2:af: f1:b2:05:df:8e:d3:a6:af:ca:76:98:8c:da:8d:bd: 42:b7:af:c7:67:0d:b4:b3:4e:e0:66:46:d1:57:f1: dd:77:3d:d8:5b:54:9e:6a:b2:16:6c:76:c1:3f:95: df:fa:40:07:5b:fe:3a:65:7f:6a:01:d8:55:c8:76: 25:f3:20:a4:e3:fe:1e:ad:c4:bc:3f:74:79:63:75: 7c:d7:ed:fb:89:d4:81:1d:f8:aa:f2:98:9b:17:79: 98:7a:bf:89:49:d1:ea:18:9d:75:d7:cb:2b:28:ba: 8c:98:23:44:73:f1:f5:93:df:8f:a0:15:b3:6f:40: 61:57:88:a5:f5:7a:0c:fb:2e:12:4b:c1:6d:8a:02: c7:be:36:ad:81:b9:1b:c1:f7:a4:30:64:0e:3b:c5: 32:b6:4d:68:1e:4f:45:2e:a5:25:1f:16:00:65:34: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:58:52:BA:AA:89:6B:48:F0:39:84:0A:E4:74:CE:36:0E:F4:6B:83 X509v3 Authority Key Identifier: keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/plhSuqqJa0jwOYQK5HTONg70a4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.229.0/24 185.70.47.0/24 Signature Algorithm: sha256WithRSAEncryption 72:1e:20:f8:2d:75:3f:31:4c:01:7c:cf:4a:e9:d6:7c:5b:27: 67:80:46:a2:f4:8d:8c:70:e5:28:b3:a3:d7:f9:e7:20:8d:d5: b3:db:d2:59:ad:6e:96:f2:d3:54:46:94:50:c6:7b:92:82:45: 36:f7:8f:f7:0f:0e:7e:b2:96:d1:eb:13:86:5b:c5:aa:6f:aa: c2:58:a5:02:a6:64:31:39:76:13:bd:73:e4:e0:89:5f:f9:e9: 1a:23:0d:74:a1:f7:40:3e:74:17:85:b1:51:60:6e:ef:ff:68: 5b:0f:76:74:e9:04:66:41:b9:4d:4f:54:f9:0c:fc:b9:22:bd: 28:d3:77:e7:f1:89:d7:c1:7e:66:56:d0:f1:c3:c0:8c:53:05: 27:52:a8:12:bf:21:5b:18:96:3a:8b:b9:56:bb:fe:c1:16:3b: 30:28:90:44:e3:ab:81:58:59:22:ba:79:03:9c:1b:a0:87:08: dd:f1:27:4b:33:dd:04:81:3b:3c:e7:1b:8f:30:76:21:72:6f: 34:91:d9:93:2f:a3:8a:14:f0:14:59:6c:01:be:c0:35:b9:17: 96:55:6d:de:52:ee:ed:2b:cb:ca:33:f5:82:b5:d2:ad:cf:c4: 0d:65:ad:d9:44:78:a8:89:fb:6e:68:04:6a:69:29:e5:0f:02: e5:a7:39:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EdQMs1tDYfBWRa4pv8HSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYThjNmU5MzA4YmIwMDA4MzEwMDE3MWUwMGRiYjYxNDBm NGY1ODAwHhcNMjYwMTAyMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjU4NTJiYWFhODk2YjQ4ZjAzOTg0MGFlNDc0Y2UzNjBlZjQ2YjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XK5ZyiXeLegX1Al1ERQC8oBfQ70 gyUU9sObxftV1We+8JvVXYYfzlt6h9PImQPqtcH0pXb9NFaLHp3QN2ASfniakKSd G8rDBA+da5rstRQkCeWn1ZlF0q/xsgXfjtOmr8p2mIzajb1Ct6/HZw20s07gZkbR V/Hddz3YW1SearIWbHbBP5Xf+kAHW/46ZX9qAdhVyHYl8yCk4/4ercS8P3R5Y3V8 1+37idSBHfiq8pibF3mYer+JSdHqGJ1118srKLqMmCNEc/H1k9+PoBWzb0BhV4il 9XoM+y4SS8FtigLHvjatgbkbwfekMGQOO8Uytk1oHk9FLqUlHxYAZTRTvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKZYUrqqiWtI8DmECuR0zjYO9GuDMB8GA1UdIwQY MBaAFBCoxukwi7AAgxABceANu2FA9PWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYt NmI0OTdiMmMwYjM4LzEvcGxoU3VxcUphMGp3T1lRSzVIVE9OZzcwYTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYtNmI0OTdiMmMwYjM4 LzEvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqxnlAwQA uUYvMA0GCSqGSIb3DQEBCwUAA4IBAQByHiD4LXU/MUwBfM9K6dZ8WydngEai9I2M cOUos6PX+ecgjdWz29JZrW6W8tNURpRQxnuSgkU294/3Dw5+spbR6xOGW8Wqb6rC WKUCpmQxOXYTvXPk4Ilf+ekaIw10ofdAPnQXhbFRYG7v/2hbD3Z06QRmQblNT1T5 DPy5Ir0o03fn8YnXwX5mVtDxw8CMUwUnUqgSvyFbGJY6i7lWu/7BFjswKJBE46uB WFkiunkDnBughwjd8SdLM90EgTs85xuPMHYhcm80kdmTL6OKFPAUWWwBvsA1uReW VW3eUu7tK8vKM/WCtdKtz8QNZa3ZRHioiftuaARqaSnlDwLlpzll -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:38 2026 by rpki-client